$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6bab8da-b737-39ae-9c0f-99a96fdf2e6c.roa File: c6bab8da-b737-39ae-9c0f-99a96fdf2e6c.roa (raw, json) Hash identifier: 4FMlD49YrsCN70Z+aPVKIpIpRZ82KHhkrelBpbNmVII= Subject key identifier: C8:38:60:70:B1:4B:6E:F7:87:56:BF:D2:15:88:48:48:B5:14:84:E2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD4D601BEF47943D4DC40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6bab8da-b737-39ae-9c0f-99a96fdf2e6c.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.109.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d4:d6:01:be:f4:79:43:d4:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=32cd83d4-50bc-4832-b85c-6563dbd2e7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:93:f6:fd:6c:de:9b:17:ab:38:71:48:ff: 9f:de:9f:46:7a:19:5c:67:35:35:30:dc:06:9e:19: 74:a0:8d:2f:87:01:d1:d9:53:ae:26:3a:7a:4b:23: 61:59:35:1a:cf:13:ea:88:96:76:08:8e:50:d5:72: f7:d0:12:9e:d0:1a:63:52:75:b9:bf:61:65:d5:04: 53:01:d6:1f:00:cf:7d:2e:ab:77:9b:d1:02:b7:e4: 3c:97:98:ed:21:bd:fd:ed:52:8e:03:21:03:61:67: 36:fc:6a:4b:5a:4e:65:51:19:35:ae:7b:e7:f4:c0: 69:1a:96:f7:71:30:ab:d9:f6:a9:7c:a4:35:e4:ee: af:fc:58:84:21:4e:7c:7a:41:e6:cb:99:08:ba:0f: e0:64:21:03:81:2f:31:cd:bb:9d:cb:1a:f6:e4:4f: 53:39:3d:15:46:5a:14:05:78:c3:98:00:e7:d2:45: a5:f1:b0:31:ac:5a:3b:28:3d:54:90:7c:5c:20:ff: 25:f7:83:de:b8:71:e7:20:3c:7d:6e:e3:5c:d1:80: 3f:43:98:b4:7c:46:4c:c7:88:ba:0b:b5:4a:2d:ae: cb:97:60:89:1f:73:88:5c:0d:92:96:98:2f:9d:c4: ad:02:a2:5a:99:7d:ad:ca:c7:e8:d5:ef:be:62:8a: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:38:60:70:B1:4B:6E:F7:87:56:BF:D2:15:88:48:48:B5:14:84:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6bab8da-b737-39ae-9c0f-99a96fdf2e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.109.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7c:18:aa:c2:c1:3b:e3:ea:f5:6c:83:f6:c0:ce:6d:3f:27: 9b:be:7c:9f:c1:84:6b:fb:3e:57:fb:76:95:7d:82:d0:35:66: 05:ce:a0:30:a3:f4:7b:77:81:93:8a:91:79:d7:67:a6:d0:17: 8a:02:ca:e5:7f:59:11:0e:0c:ee:1c:73:ad:7c:33:d3:15:e1: c2:3d:61:b3:9c:c3:c1:1f:53:90:f0:3d:0f:5a:93:7f:47:85: b6:3e:7e:2d:fa:9f:c9:08:ea:52:77:af:a2:76:e0:59:4f:50: cb:7b:57:42:f7:d9:70:80:d7:6e:bd:8c:8a:f5:d0:1c:f3:b5: b1:a6:be:80:71:5d:7f:d0:3e:70:ec:cf:f8:cc:2e:ae:f9:38: 15:41:ab:a5:36:e9:27:9d:36:7f:32:08:97:9a:34:fa:98:f8: f5:f2:d7:d6:e1:6c:1a:24:1f:36:3f:5f:6c:77:aa:d8:86:a8: e6:12:41:b7:08:1e:23:97:3b:4c:bb:3a:47:00:20:52:ef:28: 19:82:1f:2d:1d:78:1d:38:bf:13:70:00:49:5e:ae:3f:da:a2: 84:db:2e:07:39:1e:8b:07:40:fc:2b:b4:a5:2b:44:c5:fe:69: d5:21:e6:85:74:a2:48:1b:a8:1b:cd:09:95:35:56:34:e8:5d: 6c:17:a4:3b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7nvNTWAb70eUPU3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MzJjZDgzZDQtNTBiYy00ODMyLWI4NWMtNjU2M2RiZDJlN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbyT9v1s3psXqzhxSP+f3p9GehlcZzU1MNwG nhl0oI0vhwHR2VOuJjp6SyNhWTUazxPqiJZ2CI5Q1XL30BKe0BpjUnW5v2Fl1QRT AdYfAM99Lqt3m9ECt+Q8l5jtIb397VKOAyEDYWc2/GpLWk5lURk1rnvn9MBpGpb3 cTCr2fapfKQ15O6v/FiEIU58ekHmy5kIug/gZCEDgS8xzbudyxr25E9TOT0VRloU BXjDmADn0kWl8bAxrFo7KD1UkHxcIP8l94PeuHHnIDx9buNc0YA/Q5i0fEZMx4i6 C7VKLa7Ll2CJH3OIXA2SlpgvncStAqJamX2tysfo1e++YorERQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMg4YHCxS273h1a/0hWISEi1FITiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzZiYWI4ZGEtYjczNy0z OWFlLTljMGYtOTlhOTZmZGYyZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArG0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQ3wYqsLBO+Pq9WyD9sDObT8nm758n8GEa/s+V/t2lX2C0DVmBc6gMKP0 e3eBk4qReddnptAXigLK5X9ZEQ4M7hxzrXwz0xXhwj1hs5zDwR9TkPA9D1qTf0eF tj5+LfqfyQjqUnevonbgWU9Qy3tXQvfZcIDXbr2MivXQHPO1saa+gHFdf9A+cOzP +Mwurvk4FUGrpTbpJ502fzIIl5o0+pj49fLX1uFsGiQfNj9fbHeq2Iao5hJBtwge I5c7TLs6RwAgUu8oGYIfLR14HTi/E3AASV6uP9qihNsuBzkeiwdA/Cu0pStExf5p 1SHmhXSiSBuoG80JlTVWNOhdbBekOw== -----END CERTIFICATE-----Generated at Thu Aug 27 21:43:46 2026 by rpki-client